6 hours
Notification to CERT-In under CERT-In Directions 2022. From the recorded awareness decision.
CERT-In Directions 2022
Use case · Breach
Respond to a breach in India, on the clock.
Two deadlines start the moment you become aware. CERT-In requires notification within 6 hours. For the Data Protection Board: first notice without delay, and a full report within 72 hours. Wheelhouse records the moment of awareness as a decision and starts both clocks from it.
Runs in your cloud, on your premises, or air-gapped. No managed SaaS.
Last reviewed
Illustrative. No customer data.
The difference
Their way, and ours.
Their wayRaidu
A breach response checklist in a document.Awareness recorded as a decision; both clocks start from it.
One timer from when the alert fired.CERT-In and Board clocks run separately, both from the recorded awareness decision.
Filings drafted in email, sent separately.Principal intimation and Board submission built in place, each with a chain entry.
How Raidu handles it
From awareness to both filings.
- 01
Record the moment of awareness.
Awareness is a decision, not a timestamp. You record when you became aware, with the reason on the record. Both clocks run from that decision, not from when the first alert fired.
- 02
Two clocks, visible separately.
The CERT-In 6-hour clock and the Board 72-hour clock run as separate instruments. Each displays time remaining. Both pull from the same recorded awareness decision.
- 03
Both filings built in place.
The principal intimation to CERT-In and the submission to the Data Protection Board are built on the same screen. Both leave a chain entry.
Wheelhouse
What handles it.
Breach Clocks
CERT-In 6-hour and Board 72-hour clocks, both from the awareness decision. Both filings built in place.
Read more ›DPDP Compliance
130 provisions from the Gazette. Obligations with provenance and commencement dates.
Read more ›Proof Pack
Tamper-evident evidence a regulator can check, claim by claim.
Read more ›The product
See the screens.
Product windows from the films, with sample data. No customer data.
The clock
The deadlines.
72 hours
Data Protection Board: first notice without delay, full report within 72 hours. From the recorded awareness decision. Under DPDP Rules 2025.
DPDP Rules 2025
Common questions
Answered straight.
When do the clocks start?
From awareness, recorded as a decision, not from the timestamp of the first alert.
Why are there two clocks?
CERT-In’s Directions 2022 require notification within 6 hours. The DPDP Rules require first notice to the Data Protection Board without delay, and a full report within 72 hours. Different laws, different recipients.
Who receives each filing?
CERT-In receives the notification under the CERT-In Directions 2022. The Data Protection Board receives the intimation under the DPDP Rules.
Can we file directly from Wheelhouse?
Yes. The principal intimation and the Board submission are both built in Wheelhouse. Each leaves a chain entry.
What if we are unsure when we became aware?
The awareness decision requires a reason on the record. The clock starts from the decision you make, with that reason documented.